Ruby

SSH Key Fingerprint

Demonstrates generating a fingerprint for an SSH key. The private key is imported into an SshKey object — setting Password first if the key file is encrypted — and GenFingerprint returns the fingerprint.

Note: The file paths are relative to the application's current working directory. Supply the paths to your own files.

Background: A key fingerprint is a short hash that stands in for the full key, making it practical for humans to compare and for inventories to record. The everyday use is confirming that the private key you hold corresponds to a particular public key installed on a server — matching fingerprints is far easier than comparing key material. Note this fingerprints your own key; use Ssh.GetHostKeyFP to fingerprint a server's host key.

Chilkat Ruby Downloads

Download Chilkat for Ruby

Ruby

require 'chilkat'

success = false

#  Demonstrates generating a fingerprint for an SSH key.

key = Chilkat::CkSshKey.new()

#  Set the password before importing an encrypted private key.  This should come from a secure
#  source rather than being hard-coded.
key.put_Password("myKeyPassword")

#  LoadText is a convenience method that reads any text file into a string.  It does not itself
#  load the key.
keyStr = key.loadText("qa_data/privkey_openssh_encrypted.pem")
if (key.get_LastMethodSuccess() == false)
    print key.lastErrorText() + "\n";
    exit
end

success = key.FromOpenSshPrivateKey(keyStr)
if (success == false)
    print key.lastErrorText() + "\n";
    exit
end

fingerprint = key.genFingerprint()
if (key.get_LastMethodSuccess() == false)
    print key.lastErrorText() + "\n";
    exit
end

print fingerprint + "\n";
#  For example:  ssh-rsa 2048 d0:5f:f7:d6:49:60:7b:50:19:f4:41:59:d4:1f:61:7a